Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft
File:                     B97B101303D652EE5C0234A7A800429959745FF3.mft (raw, json)
Hash identifier:          ntV34YftuBDOcSPateMbs1AMDeLQSau6/nRAw3pOilI=
Subject key identifier:   C7:DA:C3:B7:17:09:11:03:25:67:FD:5A:B0:89:1D:69:1D:6D:0E:D0
Authority key identifier: B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3
Certificate issuer:       /CN=B97B101303D652EE5C0234A7A800429959745FF3
Certificate serial:       75E14FB3A7D1926E15026D61400306EBCF5467FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft
Manifest number:          B8
Signing time:             Thu 17 Sep 2026 05:35:19 +0000
Manifest this update:     Thu 17 Sep 2026 05:30:19 +0000
Manifest next update:     Fri 18 Sep 2026 08:30:19 +0000
Files and hashes:         1: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (hash: mN5cWIUuUL1fnGvlZsaLohBNga7Bn6CrhTgI7eY4kEs=)
                          2: B97B101303D652EE5C0234A7A800429959745FF3.crl (hash: 29eN5IyzaHSJVbXiNuzOoqWmigrS0ZP0tq0KVhz3JE4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl
                          rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 08:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e1:4f:b3:a7:d1:92:6e:15:02:6d:61:40:03:06:eb:cf:54:67:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B97B101303D652EE5C0234A7A800429959745FF3
        Validity
            Not Before: Sep 17 05:30:19 2026 GMT
            Not After : Sep 18 08:30:19 2026 GMT
        Subject: CN=C7DAC3B7170911032567FD5AB0891D691D6D0ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:74:e3:ad:79:a9:a9:7c:00:7b:e9:07:36:c2:
                    b7:b4:43:89:97:88:1e:fc:8a:2e:27:5b:e2:f3:c8:
                    40:38:bd:1d:1d:9d:70:21:01:47:f0:23:8c:5a:b1:
                    d9:19:d2:3f:99:0a:b6:9e:10:44:e1:e8:7f:3f:31:
                    c6:6c:2f:c5:c1:82:0f:07:80:21:8c:c9:2c:dd:ae:
                    87:70:98:07:ca:69:7a:d8:9b:40:36:95:03:fe:62:
                    9b:17:2d:d7:81:52:a7:d1:53:63:37:c5:31:e0:d2:
                    13:2f:db:8a:9f:1b:36:f5:c6:0f:e5:bf:ee:f5:f1:
                    dc:72:27:c6:ad:fa:c6:0e:b4:38:ee:52:9c:5c:bd:
                    92:1e:6f:f7:1a:74:83:1d:d1:99:4d:37:aa:cb:55:
                    ef:f5:8f:32:47:9b:25:03:b5:ff:48:a8:8a:87:df:
                    42:01:9d:16:ee:b7:61:67:fe:de:ba:c8:b2:4d:88:
                    4d:ad:1f:9f:23:a3:b6:62:54:14:ca:16:7a:26:cf:
                    95:e5:e5:0f:0d:8b:47:df:4a:69:2d:9e:a6:d0:d0:
                    d2:05:e0:40:f9:46:12:9f:40:8c:89:27:ee:87:4f:
                    3a:1a:5d:d5:f6:fe:3c:e8:f5:16:22:53:c9:90:b9:
                    44:b4:13:17:0e:b6:50:5a:00:73:1c:7a:48:27:cf:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DA:C3:B7:17:09:11:03:25:67:FD:5A:B0:89:1D:69:1D:6D:0E:D0
            X509v3 Authority Key Identifier:
                keyid:B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2c:6d:e2:4a:1a:f5:98:56:0d:36:c7:36:e2:9e:d3:bf:30:
         df:b9:16:bf:e0:2a:3d:5b:78:41:09:7b:df:fa:0c:78:4b:6a:
         c6:ea:33:52:0d:33:df:c1:2d:ce:66:27:fd:1a:8b:e7:13:bf:
         ef:24:0d:fc:36:d7:0e:a7:e8:a0:2a:4d:e1:6f:e9:7e:c7:18:
         7d:98:f7:a9:00:70:4b:ee:9d:83:34:01:9d:c8:24:33:0c:1e:
         3a:d5:9d:63:37:2b:a8:64:ce:e6:bd:a0:f2:5b:c0:11:67:f0:
         f5:21:d7:c3:1f:4b:01:91:fa:c5:c5:2a:62:ff:88:01:3b:64:
         8d:8a:32:61:de:ae:0c:58:56:a1:8e:2d:d0:9d:1a:6c:d8:46:
         e5:d5:47:a1:ef:9f:1d:53:68:f1:9c:47:9d:7f:25:3d:a9:e6:
         d8:20:fb:c2:ec:c8:24:ba:1a:a5:15:11:73:df:87:f0:db:49:
         fc:be:19:e9:47:5b:61:84:3d:97:76:69:01:b1:f7:46:09:b3:
         44:a1:22:d9:c3:71:14:2e:6b:9e:bf:73:aa:ef:c7:3e:66:04:
         6c:21:85:08:75:7d:34:6a:a4:b4:43:d4:7d:82:f0:d6:17:d9:
         1e:72:77:8f:7a:60:29:df:e6:73:98:20:6d:e2:16:b5:dd:b9:
         09:9b:34:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:23:29 2026 by rpki-client